Are There Any Sample LDIF To INSERT Or DELETE LOGONIDs?
search cancel

Are There Any Sample LDIF To INSERT Or DELETE LOGONIDs?

book

Article ID: 55114

calendar_today

Updated On:

Products

ACF2 ACF2 - DB2 Option ACF2 for zVM ACF2 - z/OS ACF2 - MISC 24X7 High-Availability Manager for DB2 for z/OS Batch Processor Compile QQF Data Compressor for DB2 for z/OS CA Unicenter NSM RC/Update for DB2 for z/OS DB2 TOOLS- DATABASE MISC PanApt PanAudit

Issue/Introduction

 

Are there any samples to insert or delete logonids by issuing an ldapadd or ldapdelete command with an LDIF?

 

 

Environment

Release:
Component: ACFLDP

Resolution

ldapadd command

Assume that we use an ldapadd command like this:

ldapadd -D acf2lid=admuser,acf2admingrp=lids,host=xxxx,o=yyy,c=zz -w admpswd -h hostname -f ADD.ldif -x

Sample LDIF for an ldapadd command to insert logonid,which would be specified on the ldapadd command above as ADD.ldif file:

  • Insert two logonids...TESTID1 who has READALL privilege and TESTID2 who has ACCOUNT privilege:

    dn:acf2lid=testid1,acf2admingrp=lids,host=xxxx,o=yyy,c=zz
    FullName:testid number 1
    userPassword:testpas1
    ReadAccessToAll:Y
    dn:acf2lid=testid2,acf2admingrp=lids,host=xxxx,o=yyy,c=zz
    FullName:testid number 2
    userPassword:testpas2
    ACF2AccountPriv:Y

    The equivalent commands under CA ACF2 are:

    INS TESTID1 NAME(TESTID NUMBER 1) PASS(TESTPAS1) READALL
    INS TESTID2 NAME(TESTID NUMBER 2) PASS(TESTPAS2) ACCOUNT

    Note: CA LDAP Server provides UFNs(User Friendly Names) for each field on the LOGONID in the CA ACF2 database.

    Example:
    ReadAccessToAll is the UFN for field READALL in the CA ACF2 database. The list for UFNs can be found in the Chapter 3 'CA ACF2_RA Backend' in CA LDAP Server for CA ACF2 Administrator Guide.

ldapdelete command

Assume that we use an ldapdelete command like this:

ldapdelete -D acf2lid=admuser,acf2admingrp=lids,host=xxxx,o=yyy,c=zz -w admpswd -h hostname -f DELETE.ldif -x

Sample LDIF for an ldapdelete command to delete logonid,which would be specified on the ldapdelete command above as DELETE.ldif file:

  • Delete two logonids...TESTID1 and TESTID2:

    acf2lid=testid1,acf2admingrp=lids,host=xxxx,o=yyy,c=zz
    acf2lid=testid2,acf2admingrp=lids,host=xxxx,o=yyy,c=zz

    The equivalent commands under CA ACF2 are:

    DEL TESTID1
    DEL TESTID2